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IN THE CLAIMS : 

Please amend the claims as follows. 

1-23 (Cancelled) 

24. (Currently Amended) A system for providing service attribute information 
comprising: 

a directory server comprising a hierarchical data store associating a plurality of 
target entries with service attributes, said hierarchical data store comprising an 
organization level and a managed role level and further comprising attribute 
templates defined with respect to services and levels; 
an application configured to designate a predefined service attribute in response to a 
query for [[a]] said p redefined service attribute associated with one of said 
plurality of target entries , an application for d e signating said pr e d e fin e d s e rvic e 
attribut e; and 

wherein said directory server, in response to said-designating said predefined service 

attribute , s e arching is configured to search said hierarchical data store for target 
entries that comprise said predefined service attribute. 

25. (Previously Presented) The system as recited in Claim 24 wherein said predefined 

service attribute is associated with a role comprising one or more service attribute. 
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26. (Previously Presented) The system as recited in Claim 25 wherein said predefined 

service attribute is associated with said managed role associated with an 
organization of said organization level. 

27. (Previously Presented) The system as recited in Claim 24 wherein said attribute 

templates comprise: 

a first template defined with respect to a first service and a first managed 
role; and 

a second template defined with respect to said first service and a second 
managed role. 

28. (Previously Presented) The system as recited in Claim 24 wherein said attribute 

templates further comprise a third template defined with respect to a second 
service and said first managed role. 

29. (Previously Presented) The system as recited in Claim 24 wherein said predefined 

attribute is nsRoleDN. 

30. (Previously Presented) The system as recited in Claim 24 wherein said directory 

server assigns said distinguished name of said managed role to said predefined 
service attribute if said one of said plurality of target entries belongs to said 
managed role. 
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31 . (Previously Presented) A method for searching a tree structured hierarchical 

directory server, said directory server comprising a plurality of entries comprising 
at least one role, said role for grouping said plurality of entries comprising: 

accessing a first role associated with one or more of said plurality of entries 

wherein said first role comprises a first identifiable attribute and a 

first distinguished name; 
accessing a second role associated with one or more of said plurality of 

entries wherein said second role comprises a second identifiable 

attribute and a second distinguished name; 
determining if one or more of said plurality of entries comprises said first 

identifiable attribute and said second identifiable attribute; and 
creating a third role comprising said first identifiable attribute and said 

second identifiable attribute. 

32. (Previously Presented) The method as recited in Claim 31 further comprising: 

creating a nested role by encapsulating said first distinguished name and 
said second distinguished name wherein said nested role comprises 
said first identifiable attribute and said second identifiable attribute 
and can be associated with one or more of said plurality of entries. 

33. (Previously Presented) The method as recited in Claim 32 further comprising: 

encapsulating said first identifiable attribute and said second identifiable 
attribute into a third distinguished name. 

34. (Previously Presented) The method as recited in Claim 33 wherein said third 

distinguished name is nsRoleDN. 
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35. (Previously Presented) The method as recited in Claim 31 wherein said first role is a 

dynamic role and wherein said first identifiable attribute is computed at the time 
of accessing said first role. 

36. (Previously Presented) The method as recited in Claim 31 wherein said first role is 

an enumerated role. 

37. (Previously Presented) The method as recited in Claim 31 wherein said first role is a 

filtered role. 

38. (Previously Presented) The method as recited in Claim 31 wherein said first role is a 

nested role. 

39. (Previously Presented) A computer readable medium comprising instructions, that 

when executed, perform a method for searching a tree structured hierarchical 
directory server, said directory server comprising a plurality of entries comprising 
at least one role, said role for grouping said plurality of entries, said method 
comprising: 

accessing a first role associated with one or more of said plurality of entries 

wherein said first role comprises a first identifiable attribute and a 

first distinguished name; 
accessing a second role associated with one or more of said plurality of 

entries wherein said second role comprises a second identifiable 

attribute and a second distinguished name; and 
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determining if one or more of said plurality of entries comprises said first 
identifiable attribute and said second identifiable attribute. 

40. (Previously Presented) The computer readable medium as recited in Claim 39 

further comprising instructions for: 

creating a nested role by encapsulating said first distinguished name and 
said second distinguished name wherein said nested role comprises 
said first identifiable attribute and said second identifiable attribute 
and can be associated with one or more of said plurality of entries. 

41. (Previously Presented) The computer readable medium as recited in Claim 40 further 

comprising instructions for: 

encapsulating said first identifiable attribute and said second identifiable 
attribute into a third distinguished name. 

42. (Previously Presented) The computer readable medium as recited in Claim 41 

wherein said third distinguished name is nsRoleDN. 

43. (Previously Presented) The computer readable medium as recited in Claim 39 

wherein said first role is a dynamic role and wherein said first identifiable 
attribute is computed at the time of accessing said first role. 

44. (Previously Presented) The computer readable medium as recited in Claim 39 

wherein said first role is an enumerated role. 
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45. (Previously Presented) The computer readable medium as recited in Claim 39 

wherein said first role is a filtered role. 

46. (Previously Presented) The computer readable medium as recited in Claim 39 

wherein said first role is a nested role. 



